PT-2006-4877 · Lhaplus · Lhaplus

Tan Chew Keong

·

CVE-2006-4033

·

Publicado

2006-08-09

·

Atualizado

2018-10-17

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Lhaplus versions 1.52 and possibly earlier
Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize.
Recommendations For Lhaplus versions 1.52 and possibly earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-4033

Produtos afetados

Lhaplus